org.lz4:lz4-pure-java

v1.8.0Maven· Java

The verdict

Has 2 high-severity advisories. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the Maven registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityUnknown

Security2 advisories

LicensePermissive

DepsZero deps

Maintenance

Last published 4 years ago.

Popularity

Download count unavailable.

Security

2 known advisories (worst: high severity).

License

Apache-2.0

Dependencies

No runtime dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
yawkat LZ4 Java has a possible information leak in Java safe decompressor
GHSA-cmp6-m4wj-q63q Published 2025-12-05
HIGH
LZ4 Java Compression has Out-of-bounds memory operations which can cause DoS
GHSA-vqf4-7m7x-wgfc Published 2025-11-28

Recent releases